Muhammad Salman
Computer Science Graduate | Machine Learning & Security Research
Hire this person
Send a job offer directly to this candidate
About
Computer Science graduate (CGPA 3.9/4.0) with hands-on experience in deep learning, full-stack development, and web application security. Built and shipped a voice-to-invoice micro-SaaS product, designed a novel deep learning model for breast cancer detection as a final year research project, and independently found and reported security vulnerabilities to companies like Cloudflare, Meta, and LinkedIn. Looking for an internship where I can keep learning while contributing real, hands-on work.
Experience
Security Researcher at Cloudflare
Independently research and report web application vulnerabilities through HackerOne and Bugcrowd. Selected findings:
- found and reported a two-factor authentication bypass in the login flow; validated and triaged by Cloudflare's security team.
Security Researcher at Meta (Facebook)
- reported a reusable password-reset link that stayed active after a password change; acknowledged by Meta's security team.
Security Researcher at Kiwi.com
- chained an IP-based rate-limit bypass with a header-manipulation flaw to fully break OTP-based login protection.
Security Researcher at LinkedIn, Figma, Grammarly, LaunchDarkly, Pinterest, Boozt Fashion
- reported additional authentication and account-recovery weaknesses (session reuse, OAuth account-linking gaps, missing re-verification on sensitive actions).
Education
BS in Computer Science – University of Swat, Pakistan (2021-11 – 2025-10)
